Command execution vulnerability in the pelco Sarix Pro network camera set_param program (CNVD-2017-36494)

pelco Sarix Professional is a video camera. A command execution vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability is caused due to the program not performing security checks on user-submitted parameters, allowing an attack to take full control of the...

Pelco Sarix Pro Network Camera WEB Management Interface Login Bypass Vulnerability

pelco Sarix Professional is a video camera. A login bypass vulnerability exists in the WEB management interface of the pelco Sarix Pro network camera. This allows an attacker to bypass password authentication and log in to the WEB management interface directly as an administrator...

XML Entity Injection Vulnerability in Pelco Sarix Pro Webcam import.cgi

pelco Sarix Professional is a video camera. An XML entity injection vulnerability in import.cgi in the pelco Sarix Pro webcam allows attackers to exploit the vulnerability to obtain sensitive information...

Pelco Sarix Pro Network Camera set_param Program Has an Override Access Vulnerability

pelco Sarix Professional is a video camera. An override access vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability allows attackers to remotely enable ssh services without authentication to take full control of the camera...

Command execution vulnerability in the pelco Sarix Pro network camera set_param program (CNVD-2017-36490)

pelco Sarix Professional is a video camera. A command execution vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability is caused due to the program failing to perform security checks on user-submitted parameters, allowing an attacker to take full control of...

Command Execution Vulnerability in the Pelco Sarix Pro Network Camera export.cgi Program

pelco Sarix Professional is a video camera. A command execution vulnerability exists in the pelco Sarix Pro network camera export.cgi program. The vulnerability is caused due to the program failing to perform a security check on data when executing system commands, allowing an attacker to take fu...

Command Execution Vulnerability in the set_param Program of the Pelco Sarix Pro Network Camera

pelco Sarix Professional is a video camera. A command execution vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability is caused due to the program not performing security checks on user-submitted parameters, allowing an attack to take full control of the...

Information Disclosure Vulnerability in Pelco Sarix Pro Network Camera

pelco Sarix Professional is a video camera. An information disclosure vulnerability exists in the pelco Sarix Pro network camera. The vulnerability allows attackers to obtain sensitive information...

Schneider Electric Pelco VideoXpert File Disclosure

File disclosure vulnerability in Schneider Electric Pelco VideoXpert /portal/ URI Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Schneider Electric Pelco VideoXpert auth_token Cookie Disclosure

Schneider Electric Pelco VideoXpert /portal/ URI path traversal authtoken cookie disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Multiple Cross-Site Scripting Vulnerabilities in Schneider Electric Pelco Sarix/Spectra Cameras

Pelco Sarix/Spectra Cameras is a camera offered by Pelco. Schneider Electric Pelco Sarix/Spectra Cameras has multiple cross-site scripting vulnerabilities that can be exploited by attackers to execute arbitrary HTML and script code...

Schneider Electric Pelco VideoXpert Information Disclosure Vulnerability

VideoXpert is a video management solution designed for scalability to fit any size on-demand surveillance operation. An information disclosure vulnerability exists in Schneider Electric Pelco VideoXpert. An attacker could exploit the vulnerability to obtain sensitive information...

Schneider Electric Pelco Sarix/Spectra Cameras Cross-Site Scripting Vulnerability

Pelco Sarix/Spectra Cameras is a video camera. A cross-site scripting vulnerability exists in Schneider Electric Pelco Sarix/Spectra Cameras. When passed multiple parameters to multiple scripts, they are not properly filtered before being returned to the user. An attacker can exploit the...

Schneider Electric Pelco Sarix/Spectra Cameras Cross-Site Request Forgery Vulnerability

Pelco Sarix/Spectra Cameras is a video camera. A cross-site request forgery vulnerability exists in the Schneider Electric Pelco Sarix/Spectra Cameras. An attacker can exploit the vulnerability user to perform certain actions if a logged in user visits a malicious web site with this privilege...

Schneider Electric Pelco VideoXpert Elevation of Privilege Vulnerability

VideoXpert is a video management solution designed for scalability to fit any size on-demand surveillance operation. An elevation of privilege vulnerability exists in Schneider Electric Pelco VideoXpert that could allow a local attacker to elevate privileges and execute arbitrary code...

Schneider Electric Pelco VideoXpert Directory Traversal Vulnerability

VideoXpert is a video management solution designed for scalability to fit any size on-demand surveillance operation. A directory traversal vulnerability exists in Schneider Electric Pelco VideoXpert, which can be exploited by an attacker to view arbitrary files in the context of a web server...

Schneider Electric Pelco Sarix/Spectra Cameras Remote Code Execution Vulnerability

Pelco Sarix/Spectra Cameras is a video camera. A remote code execution vulnerability exists in the Schneider Electric Pelco Sarix/Spectra Cameras. A remote attacker can exploit the vulnerability to execute arbitrary system commands, authorize system access with root privileges, and use specially...

Pelco VideoXpert Detection

Detection of Pelco VideoXpert. The script sends a connection request to the server and attempts to detect Pelco VideoXpert. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vulnerability

Pelco VideoXpert suffers from a directory traversal vulnerability. Exploiting this issue will allow an unauthenticated attacker to view arbitrary files within the context of the web server. Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vendor: Schneider Electric SE...

Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution

Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Sarix Enhanced - Model: IME219 Firmware: 2.1.2.0.8280-A0.0 Sarix Enhanced - Model: IME119 Firmware: 2.1.2.0.8280-A0.0 Sarix - Model:...